a1d3f68d4bc0c72338d76cd30b56ab4a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1d3f68d4bc0c72338d76cd30b56ab4a_JaffaCakes118
Size

56KB
MD5

a1d3f68d4bc0c72338d76cd30b56ab4a
SHA1

915750d718acdcebab9cc9e9b945015f5f0fe452
SHA256

03b2940df5768fac3581b3c0caadf2463736b4f69067bf18369e1f43df8bdf0c
SHA512

2323e4dcd7469588516690581e782c3ace8ed3a02b6d58fb4db458c0e1cdd893c8feb9cf5142678dad35abb60a004989c1e29b9a9eea75487f7ba2b73d14600a
SSDEEP

1536:0M+NwCjP2mLH+r6TdiAY8nZmTqwkWkzf1j9iFwno:0M+OCD2mLHxTdiAYbOpRno

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1d3f68d4bc0c72338d76cd30b56ab4a_JaffaCakes118

Files

a1d3f68d4bc0c72338d76cd30b56ab4a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e4f6a55636903e4bb4d4fecce87f9712

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FillConsoleOutputCharacterW
SetInformationJobObject
OpenFile
GetCommModemStatus
GetOEMCP
WriteProfileStringW
OutputDebugStringW
EnumSystemCodePagesW
GetSystemPowerStatus
Heap32ListFirst
FindActCtxSectionStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE